Kokar Help CenterCapabilities
Everything a connected AI app can do in your workspace, and the permission each one needs.
When you approve a connection you choose which of two permissions to grant:
| Permission | Covers |
|---|---|
| View | Everything under Reading below. |
| Create and update | Everything under Writing below. |
Grant view only and every writing capability is refused, with a message saying it needs write access.
Every capability below takes an optional workspace β say which one you mean and it runs there; say nothing and it runs in the connection's default. Two capabilities exist just for that:
| Capability | What it does |
|---|---|
| List workspaces | Every workspace you belong to, with your role in each and which one is the default. |
| Set default workspace | Changes the default for this connection β "switch to Acme". It stays changed until you change it again. |
Reading
Finding your way around
| Capability | What it does |
|---|---|
| Get workspace hierarchy | Returns the tree β spaces, their folders and subfolders, and the projects in each. This is how the app learns what exists before doing anything else. |
| List members | The people in the workspace, with their roles. Used to work out who to assign a task to when you name someone. |
| Get docs hierarchy | The documents tree β folders, pages and sub-pages you have access to. |
Tasks
| Capability | What it does |
|---|---|
| List tasks | Open tasks, optionally just yours or just one project's. |
| Get task | The full detail of one task β description, status, priority, dates, project, assignees. |
| List overdue tasks | Open tasks past their due date, most overdue first, reckoned in your workspace's timezone. |
| Search tasks | Finds tasks by title, across the workspace or within one project β for when you refer to a task by name. |
| Get task comments | Reads a task's comment thread, with author names. |
Docs
| Capability | What it does |
|---|---|
| Search docs | Finds document pages by title, with the document each belongs to. |
| Read doc page | Reads a page's content, so the app can summarise or answer questions from it. |
Chat
| Capability | What it does |
|---|---|
| List conversations | Your channels and direct messages, most recently active first. |
| List chat messages | Reads the recent messages in one channel or direct message, oldest first, with sender names β so an app can catch you up or summarise a thread. Only conversations you belong to. |
Time tracking
| Capability | What it does |
|---|---|
| Get time entries | The time logged on a task, by whom, with the total β or, with no task named, your own recent entries and whether a timer is running right now. Someone else's timer stays private until they stop it. |
Attendance, time off and the audit log
The workspace's people data. Each of these carries the same permission it carries in the app, so an app asking on behalf of someone without it is refused rather than answered.
| Capability | What it does | Needs |
|---|---|---|
| Get attendance β day | Who worked on a given day: check-in and check-out, break and worked time, overtime, and whether the punch was off-site. Defaults to today in your workspace's timezone. | Attendance access |
| Get attendance β member | One person's day-by-day record over a range, with the same totals the PDF export carries. Defaults to the last 30 days. | Attendance manager |
| Get attendance β team | Per-person totals over a range for the whole roster β days worked, hours, overtime. | Attendance manager |
| Get time off | Your own balances for the year and your requests β or, for whoever reviews leave, the whole approval queue with how much paid allowance each person has left. | Membership for your own; the time-off approval permission for the queue |
| Get audit log | Recent events in the workspace β who did what, to which item, and when. The answer to "who deleted that project". Audit logs are Enterprise; on other plans nothing is recorded, and the app is told that rather than shown an empty list. | The audit log permission β owner only unless an owner has switched admins on |
Ranged attendance needs the manager permission here
Over a connection, reading a stretch of attendance needs the attendance manager permission β including for your own days. That is stricter than the app itself, where you can always look back over your own record. Nothing is exposed that would not be; you may just have to open Kokar for it.
Writing
Tasks
| Capability | What it does | Needs |
|---|---|---|
| Create task | Adds a task to a project, with description, status, priority, dates and assignees. | Create access to the project |
| Create subtask | Adds a subtask under an existing task, in the same project. | Create access to the project |
| Update task | Changes an existing task. Only the fields mentioned change; status is set by its name on the board, e.g. "In Progress". | Edit access β or being the assignee, for status and assignee changes on your own task |
| Delete task | Sends a task to Trash, where it can be restored β same as deleting it in the app. | Full-edit access to the project. Having created the task does not stand in for it, and workspaces that limit people to deleting their own work apply here too |
| Add tag | Tags a task, creating the tag if it does not exist yet. | Edit access to the project β plus permission to manage tags, if the tag has to be created |
| Add comment | Posts a comment on a task, under your name. | Comment access to the task's project |
Structure
| Capability | What it does | Needs |
|---|---|---|
| Create space | Adds a top-level space. | Permission to create spaces |
| Create folder | Adds a folder in a space, optionally nested inside another folder. | Create access to the space |
| Create project | Adds a project (task board) in a space, optionally inside a folder. | Create access to the space β and, when you name a folder, create access to that folder as well |
Your plan's limits on how many spaces, folders and projects a workspace may hold apply here exactly as they do in the app. A connection is not a way around them.
Docs and chat
| Capability | What it does | Needs |
|---|---|---|
| Create doc page | Creates a document page, optionally nested under another page. | Permission to create docs |
| Update doc page | Adds to the end of a page, rewrites it, and/or renames it. Adding is the default; a full rewrite is only done when you ask for one. | Edit access to the page |
| Send chat message | Posts to a channel you belong to, as you. | Membership of the channel |
| Send direct message | Sends a 1:1 message to a member, starting the conversation if there isn't one. | Membership of the workspace |
Time tracking
| Capability | What it does | Needs |
|---|---|---|
| Start timer | Starts a live timer on a task, for you. One timer runs at a time, and a forgotten one stops itself after 12 hours β the same rules as the app. | Read access to the task |
| Stop timer | Stops your running timer and records the elapsed time on its task. | Read access to the task |
| Log time | Records work that already happened β minutes, an optional day and note, up to 24 hours per entry. Defaults to today in your workspace's timezone. | Read access to the task |
Everything is written as you
Chat messages and comments an AI app posts appear under your name, with no marking to say a machine wrote them, and time it logs is logged as your time. Read what it is about to send before you approve it.
What is deliberately not here
- No permission or billing changes. Roles, invitations, plans and payment details cannot be touched over a connection.
- No clocking in or out, and no correcting attendance. Attendance can be read by the people entitled to read it, never written. Office check-in depends on being where you say you are, and a connection would go around that.
- No approving or denying time off. The queue can be read; the decision stays with a person in the app.
- No permanent deletion. Deleting sends things to Trash; emptying Trash is something you do in the app.
- No access to a workspace you are not a member of, and no way to ask for one β an AI app cannot even find out whether such a workspace exists.
- No reading of private locations you are not a member of. The one exception is the workspace owner, whose connection can reach private items for the same reason they can in the app β somebody has to be able to.
- No reading of chat you are not in. This one has no exception at all: a connection can only ever see the rooms and direct messages you belong to, and that is as true of the owner's connection as anyone's.
Frequently asked questions
Can a connected AI app see my whole workspace?
Only the parts you can see. It acts as you, so the same space, project and folder permissions apply, and private locations you are not a member of stay invisible. Chat is stricter still β only the rooms and direct messages you are actually in, with no exception for anyone.
Can an AI app read attendance, time off or the audit log?
Only if you can. Those reads carry the same permission they carry in the app β the day overview needs attendance access, ranged attendance reports and the time-off approval queue need the manager permission, and the audit log needs the audit permission, which starts out with the owner alone and is an Enterprise feature besides. Someone without them gets a message saying so, which is the same nothing the app shows them.
Can it clock me in or approve time off?
No. Clocking in and out is yours to do in the app, on purpose β office check-in is tied to where you actually are, and a connection would go around that. Approving and denying time off stays in the app too.